suspectedhighSupply chainFirst reported Nov 3, 2026
OPSSHIELD: cPGuard update channel hijacked to push backdoor to customer Linux servers
An attacker compromised the update system of OPSSHIELD's cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The script installed a backdoor and collected password hashes and other sensitive files, some of which the attacker retrieved. OPSSHIELD urged administrators to install version 5.88.25 or later.
Members only
The full record: the timeline and 2 linked reports
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment OPSSHIELD — or anything else you track — is hit again
A free account is all it takes — no card, one minute.